$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/659796a6-75e5-3e13-ab55-1acd69555b91.roa File: 659796a6-75e5-3e13-ab55-1acd69555b91.roa (raw, json) Hash identifier: 1mdG9CeOWpBxuvJNDTTG9F7CgWJ0m3zeTA4I+kfz3sE= Subject key identifier: 97:77:CA:EA:94:27:FB:84:BF:36:78:BB:8C:4C:3B:B9:19:C3:59:A3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DC1278DA4766E9389C620 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/659796a6-75e5-3e13-ab55-1acd69555b91.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 35.213.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c1:27:8d:a4:76:6e:93:89:c6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=ff26a94c-9914-4ef5-b13f-2448609919c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ce:99:19:cf:ab:8e:77:28:82:c9:12:11:a6: c6:e1:3c:ba:fd:52:f5:c3:68:89:e4:52:22:1c:dc: 77:73:5d:c1:f0:bc:4e:6e:f3:d0:78:22:46:a6:8b: 39:cf:6a:e0:d7:08:58:34:fc:24:8b:a1:0d:80:13: 58:3e:f4:e5:85:ba:f7:de:83:26:e2:3a:84:e2:0f: e0:cf:ca:cb:de:00:41:d2:a1:ad:42:79:6a:07:1d: 1f:a5:d7:2d:9b:9b:78:06:a2:a3:19:26:35:38:78: 83:e6:a4:e0:92:8d:b4:1f:1c:f9:46:71:09:14:64: ce:a3:70:93:3b:31:9e:e6:f2:36:7b:fc:e7:f6:aa: e1:a7:18:e9:7b:5e:b3:2a:41:a7:82:da:be:9a:30: 8f:06:69:91:62:7e:6a:d9:82:33:08:9b:bc:05:a8: 7d:63:09:98:c0:36:80:ff:f3:08:27:e9:16:d5:3f: 56:ac:54:8e:0a:56:24:e0:ef:5c:3c:05:de:1d:8f: fb:80:e5:70:64:38:a2:c3:a3:8b:36:6a:ab:8d:af: 7d:08:9b:90:96:4d:4d:5b:a1:aa:6c:6c:2a:cd:f6: 03:83:50:8b:18:71:ec:a7:38:0e:95:d3:2e:18:f3: ee:f4:da:13:fa:a8:89:64:89:ca:ed:ea:f5:fc:ab: 33:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:77:CA:EA:94:27:FB:84:BF:36:78:BB:8C:4C:3B:B9:19:C3:59:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/659796a6-75e5-3e13-ab55-1acd69555b91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.213.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:f5:59:eb:85:e3:28:d6:d3:68:2b:e9:b8:d3:19:9b:88:9e: 91:67:12:bd:c0:0b:93:0b:82:5c:99:97:6a:bb:bc:10:74:be: f3:cf:69:47:ae:b4:9d:5a:bb:6c:8c:01:b6:f6:03:b1:16:1a: cd:4a:64:5b:40:97:ba:53:92:8a:d5:77:f3:cf:89:ed:30:d8: 14:ec:d1:16:b5:88:da:4f:32:1c:60:82:75:3b:5b:f3:d1:c4: 41:9f:21:03:b5:c6:dc:33:cb:71:c2:70:d4:ae:32:59:94:4b: 43:a7:9c:8d:bb:fc:88:52:e3:4d:75:b4:6d:a6:2f:f3:a7:fb: 96:fa:d7:4c:5d:1d:cf:3b:e1:32:a2:c0:52:1f:51:0a:7d:6a: f9:39:0b:2d:46:dc:e3:d6:01:ea:26:2c:c7:c3:67:c0:69:03: 0c:0d:a3:7d:5f:df:75:89:fc:29:b6:33:0b:9c:2f:8a:b3:dc: 32:cc:9b:cc:e3:1c:5d:fa:f5:b0:ae:08:83:e2:67:e8:69:e7: ff:b9:f5:5f:73:43:30:91:51:fd:47:c7:5a:da:f1:a5:bf:e0: 45:1c:b3:82:a1:aa:1b:8e:61:76:60:8d:83:e7:79:d4:6f:d8: 7e:f9:5f:f8:5f:a8:63:dc:b5:82:97:32:83:f9:8a:57:82:a1: 6b:7a:68:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcEnjaR2bpOJxiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZmYyNmE5NGMtOTkxNC00ZWY1LWIxM2YtMjQ0ODYwOTkxOWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc6ZGc+rjncogskSEabG4Ty6/VL1w2iJ5FIi HNx3c13B8LxObvPQeCJGpos5z2rg1whYNPwki6ENgBNYPvTlhbr33oMm4jqE4g/g z8rL3gBB0qGtQnlqBx0fpdctm5t4BqKjGSY1OHiD5qTgko20Hxz5RnEJFGTOo3CT OzGe5vI2e/zn9qrhpxjpe16zKkGngtq+mjCPBmmRYn5q2YIzCJu8Bah9YwmYwDaA //MIJ+kW1T9WrFSOClYk4O9cPAXeHY/7gOVwZDiiw6OLNmqrja99CJuQlk1NW6Gq bGwqzfYDg1CLGHHspzgOldMuGPPu9NoT+qiJZInK7er1/Ksz6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJd3yuqUJ/uEvzZ4u4xMO7kZw1mjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjU5Nzk2YTYtNzVlNS0z ZTEzLWFiNTUtMWFjZDY5NTU1YjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGI9XAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/1WeuF4yjW02gr6bjTGZuInpFnEr3AC5MLglyZl2q7vBB0vvPPaUeu tJ1au2yMAbb2A7EWGs1KZFtAl7pTkorVd/PPie0w2BTs0Ra1iNpPMhxggnU7W/PR xEGfIQO1xtwzy3HCcNSuMlmUS0OnnI27/IhS4011tG2mL/On+5b610xdHc874TKi wFIfUQp9avk5Cy1G3OPWAeomLMfDZ8BpAwwNo31f33WJ/Cm2MwucL4qz3DLMm8zj HF369bCuCIPiZ+hp5/+59V9zQzCRUf1Hx1ra8aW/4EUcs4KhqhuOYXZgjYPnedRv 2H75X/hfqGPctYKXMoP5ileCoWt6aDA= -----END CERTIFICATE-----Generated at Sun Oct 4 22:47:49 2026 by rpki-client